This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.mft
File: 1_8Td9uQGxaVp67wXd3hiF5q2MY.mft (raw, json)
Hash identifier: 0LgiEGepFy1kLjNoA3wC+S03DkVFiUMbVhFctgCdlI8=
Subject key identifier: 85:B0:32:FA:40:F3:C9:01:CC:9D:54:DD:24:D1:8F:09:AE:68:A4:0E
Authority key identifier: D7:FF:13:77:DB:90:1B:16:95:A7:AE:F0:5D:DD:E1:88:5E:6A:D8:C6
Certificate issuer: /CN=D7FF1377DB901B1695A7AEF05DDDE1885E6AD8C6
Certificate serial: 08
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1_8Td9uQGxaVp67wXd3hiF5q2MY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.mft
Manifest number: 0365
Signing time: Sat 22 Nov 2025 19:40:55 +0000
Manifest this update: Sat 22 Nov 2025 19:40:55 +0000
Manifest next update: Sun 07 Dec 2025 19:40:55 +0000
Files and hashes: 1: 1_8Td9uQGxaVp67wXd3hiF5q2MY.crl (hash: Ix+Ths2CmLoHBmlF7lkQPrQTYarEEc4uqUIrNLxdOC8=)
2: B80TFmvGB2B8PcWgV35zHexL0hw.roa (hash: QBLe25emIUN7523U7dTIgIR6ZI/mkUrdKSKApflOSTM=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1_8Td9uQGxaVp67wXd3hiF5q2MY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7FF1377DB901B1695A7AEF05DDDE1885E6AD8C6
Validity
Not Before: Nov 15 01:30:43 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=85B032FA40F3C901CC9D54DD24D18F09AE68A40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:f4:1a:0d:01:71:4a:d2:86:fd:94:9b:c7:
eb:58:24:6f:b1:42:14:76:42:92:9c:bd:e0:73:31:
ab:a3:aa:1e:d5:03:b4:51:97:7e:94:57:66:50:d0:
0b:08:50:03:b2:1d:00:46:14:87:62:7c:31:bf:28:
33:0d:e9:5b:db:fa:eb:eb:23:11:2c:47:07:c5:76:
08:aa:9a:12:c1:be:1e:90:c2:89:dc:92:01:29:5e:
c7:fd:29:55:28:8c:48:f7:57:2d:c9:af:d4:c7:12:
85:c5:d3:44:c1:2d:e7:f7:ec:ee:e8:e8:ba:9d:19:
39:ce:12:1c:6e:75:88:09:7f:52:98:6c:c6:79:9a:
6e:d3:2b:2b:78:4d:72:5e:73:e5:9c:9b:3a:42:6d:
10:23:23:32:b6:ff:21:04:12:27:78:c6:b2:26:a0:
a3:35:a2:0d:eb:5f:7e:d8:b1:a2:37:c3:4f:8c:16:
53:71:ab:5a:58:71:6e:21:fa:a1:5b:8e:af:e6:84:
a1:44:6f:71:85:30:46:79:34:44:4c:98:70:81:dc:
63:ee:c7:01:d1:6f:8c:ee:56:a5:28:57:c1:d9:6d:
82:c6:4a:c6:10:e0:3b:62:3e:c1:df:2e:1f:af:2f:
75:07:86:25:40:fe:78:8b:60:51:8c:7e:25:21:a6:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B0:32:FA:40:F3:C9:01:CC:9D:54:DD:24:D1:8F:09:AE:68:A4:0E
X509v3 Authority Key Identifier:
keyid:D7:FF:13:77:DB:90:1B:16:95:A7:AE:F0:5D:DD:E1:88:5E:6A:D8:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1_8Td9uQGxaVp67wXd3hiF5q2MY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:1a:fa:b2:6f:19:f3:25:04:44:88:d9:94:32:a9:05:5d:c6:
d5:1c:40:f8:8c:ed:26:87:ef:f2:b6:3a:32:1f:20:e0:03:e3:
26:42:2b:dc:01:4a:3e:f9:86:a3:d0:e9:43:7f:ac:7c:c3:b5:
31:8b:56:f8:88:24:f4:25:ac:65:72:a9:c0:00:80:32:9b:2c:
d3:57:0a:fb:20:f5:5d:78:04:a5:a6:26:28:c9:bd:f7:1b:b3:
50:07:3f:9f:21:4d:14:e4:2c:0d:64:1d:09:52:95:e8:85:54:
6e:10:e9:1d:8e:7e:7f:48:96:8c:7c:d0:bb:4a:af:4f:ba:42:
1b:55:85:f5:55:74:8e:48:b2:21:97:97:f2:0b:a9:05:d5:8c:
6a:7a:24:da:c0:63:49:d9:cb:85:08:09:2f:fd:1d:06:9c:76:
17:8e:8a:c8:bc:b5:47:26:7c:cb:7d:e1:84:db:02:bc:1b:7e:
5a:5f:d7:c5:49:fc:9b:64:7f:5d:8d:8d:2f:e6:a2:d9:b1:2f:
ee:45:1d:18:a0:79:8b:13:71:55:2d:4d:47:b0:99:3d:d5:d3:
ac:6a:22:e5:1b:04:61:c8:f1:17:81:3f:dc:94:35:3b:47:dd:
8b:b1:3d:5b:39:94:0c:95:6b:a9:f3:10:8a:91:d4:14:d8:ab:
34:7d:7a:c1
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEN0ZG
MTM3N0RCOTAxQjE2OTVBN0FFRjA1RERERTE4ODVFNkFEOEM2MB4XDTI1MTExNTAx
MzA0M1oXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoODVCMDMyRkE0MEYzQzkw
MUNDOUQ1NEREMjREMThGMDlBRTY4QTQwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKP89BoNAXFK0ob9lJvH61gkb7FCFHZCkpy94HMxq6OqHtUDtFGX
fpRXZlDQCwhQA7IdAEYUh2J8Mb8oMw3pW9v66+sjESxHB8V2CKqaEsG+HpDCidyS
ASlex/0pVSiMSPdXLcmv1McShcXTRMEt5/fs7ujoup0ZOc4SHG51iAl/Uphsxnma
btMrK3hNcl5z5ZybOkJtECMjMrb/IQQSJ3jGsiagozWiDetfftixojfDT4wWU3Gr
WlhxbiH6oVuOr+aEoURvcYUwRnk0REyYcIHcY+7HAdFvjO5WpShXwdltgsZKxhDg
O2I+wd8uH68vdQeGJUD+eItgUYx+JSGmg0UCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBSFsDL6QPPJAcydVN0k0Y8JrmikDjAfBgNVHSMEGDAWgBTX/xN325AbFpWnrvBd
3eGIXmrYxjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMDEvMV84VGQ5dVFHeGFWcDY3d1hkM2hpRjVxMk1ZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMV84VGQ5dVFHeGFWcDY3d1hkM2hp
RjVxMk1ZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDAxLzFfOFRkOXVRR3hhVnA2N3dYZDNoaUY1cTJNWS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjGvqybxnzJQREiNmUMqkFXcbVHED4jO0mh+/ytjoyHyDgA+MmQivc
AUo++Yaj0OlDf6x8w7Uxi1b4iCT0JaxlcqnAAIAymyzTVwr7IPVdeASlpiYoyb33
G7NQBz+fIU0U5CwNZB0JUpXohVRuEOkdjn5/SJaMfNC7Sq9PukIbVYX1VXSOSLIh
l5fyC6kF1YxqeiTawGNJ2cuFCAkv/R0GnHYXjorIvLVHJnzLfeGE2wK8G35aX9fF
SfybZH9djY0v5qLZsS/uRR0YoHmLE3FVLU1HsJk91dOsaiLlGwRhyPEXgT/clDU7
R92LsT1bOZQMlWup8xCKkdQU2Ks0fXrB
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:08 2025 by rpki-client